last executing test programs: 1m57.721599932s ago: executing program 1 (id=1275): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) 1m43.818904166s ago: executing program 0 (id=1276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 1m36.475019316s ago: executing program 1 (id=1277): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1m25.124093963s ago: executing program 0 (id=1278): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1m20.758768403s ago: executing program 1 (id=1279): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 1m5.533192746s ago: executing program 0 (id=1280): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0xc0086202, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 54.814343249s ago: executing program 1 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4048851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) 42.120706605s ago: executing program 0 (id=1282): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 30.506907953s ago: executing program 1 (id=1283): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) fchdir(r0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 9.815721223s ago: executing program 0 (id=1284): r0 = gettid() setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/packet\x00') pread64(r1, &(0x7f0000001340)=""/102390, 0x18ff6, 0x2013) 7.361076251s ago: executing program 1 (id=1285): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000600)=[{r0, 0x107}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 0s ago: executing program 0 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64896' (ED25519) to the list of known hosts. syzkaller login: [ 630.220801][ T3209] cgroup: Unknown subsys name 'net' [ 631.366464][ T3209] cgroup: Unknown subsys name 'cpuset' [ 631.549022][ T3209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 721.200283][ T3209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 863.993908][ T3217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.293738][ T3217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.977268][ T3216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.266570][ T3216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.638401][ T3217] hsr_slave_0: entered promiscuous mode [ 894.722277][ T3217] hsr_slave_1: entered promiscuous mode [ 900.100707][ T3216] hsr_slave_0: entered promiscuous mode [ 900.192785][ T3216] hsr_slave_1: entered promiscuous mode [ 900.291423][ T3216] debugfs: 'hsr0' already exists in 'hsr' [ 900.311423][ T3216] Cannot create hsr debugfs directory [ 911.944034][ T3217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.284116][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.473267][ T3217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.577833][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.699870][ T3217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.937944][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.034336][ T3217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.283414][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 917.763783][ T3216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 918.318254][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.568659][ T3216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 918.872354][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.382718][ T3216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 919.806553][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.987590][ T3216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 921.147728][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.940914][ T3217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.091410][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.185943][ T3217] veth0_vlan: entered promiscuous mode [ 1078.422588][ T3217] veth1_vlan: entered promiscuous mode [ 1083.325751][ T3217] veth0_macvtap: entered promiscuous mode [ 1084.921005][ T3217] veth1_macvtap: entered promiscuous mode [ 1093.346167][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.748726][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.818999][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.101683][ T3775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.290872][ T3216] veth0_vlan: entered promiscuous mode [ 1105.757156][ T3217] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1106.438274][ T3216] veth1_vlan: entered promiscuous mode [ 1112.776757][ T3216] veth0_macvtap: entered promiscuous mode [ 1114.051167][ T3216] veth1_macvtap: entered promiscuous mode [ 1119.549555][ T3775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.629035][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.633942][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.717857][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.116440][ T3844] Zero length message leads to an empty skb [ 1300.254021][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 1656.588524][ T3997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.53'. [ 1671.344089][ T4003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'. [ 1727.046401][ T4021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 1800.549455][ T4045] netlink: 'syz.1.73': attribute type 12 has an invalid length. [ 1869.359185][ T4064] netlink: 422 bytes leftover after parsing attributes in process `syz.1.79'. [ 2014.683166][ T4106] Line length is too long: Should be less than 4094 [ 2075.018229][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 2102.205258][ T4137] bpf: Bad value for 'uid' [ 2168.270206][ T4164] input: syz1 as /devices/virtual/input/input2 [ 2204.650943][ T4175] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2263.558156][ T4192] netlink: 220 bytes leftover after parsing attributes in process `syz.0.125'. [ 2283.021691][ T3211] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 2353.667071][ T4215] input: syz1 as /devices/virtual/input/input3 [ 2519.626525][ T4262] dummy0: entered allmulticast mode [ 2593.572686][ T4285] input: syz1 as /devices/virtual/input/input4 [ 2780.604428][ T4340] input: syz1 as /devices/virtual/input/input5 [ 2802.922715][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 2848.264035][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 2900.080299][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 2901.068889][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 2938.092985][ T4402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'. [ 2939.449043][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'. [ 3036.779298][ T4427] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 3130.253881][ T4453] bond0: entered promiscuous mode [ 3130.401210][ T4453] bond_slave_0: entered promiscuous mode [ 3130.753186][ T4453] bond_slave_1: entered promiscuous mode [ 3191.977980][ T4471] binder: 4470:4471 ioctl c0306201 200000000640 returned -22 [ 3210.814153][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 3210.821911][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 3211.809629][ T4479] veth0_to_bridge: entered promiscuous mode [ 3211.960774][ T4479] macvtap1: entered allmulticast mode [ 3211.963144][ T4479] veth0_to_bridge: entered allmulticast mode [ 3514.567869][ T4567] input: syz1 as /devices/virtual/input/input6 [ 3518.241424][ T4572] binder: 4570:4572 unknown command 0 [ 3518.260507][ T4572] binder: 4570:4572 ioctl c0306201 200000000640 returned -22 [ 3527.331542][ T4577] bond0: entered promiscuous mode [ 3527.333693][ T4577] bond_slave_0: entered promiscuous mode [ 3527.371604][ T4577] bond_slave_1: entered promiscuous mode [ 3639.466477][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.273'. [ 3640.958168][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.273'. [ 3803.868294][ T4658] macvlan1: entered promiscuous mode [ 3803.881562][ T4658] macvlan1: entered allmulticast mode [ 3927.514298][ T4695] process 'syz.0.307' launched '/dev/fd/3' with NULL argv: empty string added [ 3935.268244][ T4700] macvlan1: entered promiscuous mode [ 3935.320216][ T4700] macvlan1: entered allmulticast mode [ 3937.149820][ T4700] veth1_vlan: entered allmulticast mode [ 3995.569554][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 3995.951966][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 4007.852714][ T4727] ªªªªªª: renamed from vlan0 (while UP) [ 4084.699265][ T4751] random: crng reseeded on system resumption [ 4129.690454][ T30] audit: type=1400 audit(4384.315:2): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=4764 comm="syz.0.331" [ 4265.984194][ T4801] bond0: option mode: unable to set because the bond device has slaves [ 4318.838537][ T4816] vxcan1: tx address claim with dlc 0 [ 4647.094210][ T4917] netlink: 204 bytes leftover after parsing attributes in process `syz.0.394'. [ 4647.101154][ T4917] netlink: 72 bytes leftover after parsing attributes in process `syz.0.394'. [ 4647.104035][ T4917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 4656.013443][ T4919] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 4754.062209][ T4946] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 4857.379173][ T4970] ======================================================= [ 4857.379173][ T4970] WARNING: The mand mount option has been deprecated and [ 4857.379173][ T4970] and is ignored by this kernel. Remove the mand [ 4857.379173][ T4970] option from the mount to silence this warning. [ 4857.379173][ T4970] ======================================================= [ 4921.017191][ T30] audit: type=1326 audit(5175.615:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4990 comm="syz.1.422" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0x7fffab1341ba code=0x0 [ 5004.772477][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 5078.069463][ T5037] blkio.reset_stats is deprecated [ 5208.161471][ T5080] input: syz0 as /devices/virtual/input/input7 [ 5378.326541][ T5141] input: syz1 as /devices/virtual/input/input8 [ 5485.884124][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'. [ 5519.080519][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 5531.693957][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 5534.691733][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 5534.789896][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 5596.929029][ T5232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 5596.930601][ T5232] netlink: 'syz.0.517': attribute type 7 has an invalid length. [ 5596.932333][ T5232] netlink: 'syz.0.517': attribute type 8 has an invalid length. [ 5596.933397][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 5599.752453][ T5232] gretap0: entered promiscuous mode [ 5600.993979][ T5232] gretap0: left promiscuous mode [ 5681.317512][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 5681.790380][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 5708.681795][ T5268] netlink: 'syz.1.529': attribute type 8 has an invalid length. [ 5708.689177][ T5268] sch_fq: defrate 0 ignored. [ 5793.405718][ T5295] IPv6: NLM_F_CREATE should be specified when creating new route [ 5826.779202][ T5305] loop1: detected capacity change from 0 to 8 [ 5875.102155][ T30] audit: type=1326 audit(6129.335:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.1.552" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffab1341ba code=0x0 [ 5876.738131][ T5325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 5898.360382][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 5898.388214][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 5971.463076][ T5359] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1852661622.116), cmd(3) [ 6042.419995][ T5382] netlink: 'syz.1.579': attribute type 2 has an invalid length. [ 6042.428909][ T5382] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 6042.430178][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 6042.431518][ T5382] netlink: 'syz.1.579': attribute type 2 has an invalid length. [ 6042.432526][ T5382] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 6042.433484][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 6042.436293][ T5382] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 6082.920722][ T5396] misc userio: Can't change port type on an already running userio instance [ 6096.727138][ T30] audit: type=1400 audit(6351.465:5): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5398 comm="syz.0.584" name="unknown" offset=28 [ 6101.962559][ T5401] mmap: syz.1.585 (5401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 6423.452439][ T5501] input: syz1 as /devices/virtual/input/input9 [ 6535.449448][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 6858.048164][ T5623] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 6858.079280][ T5623] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 6858.101091][ T5623] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.666'. [ 6982.681644][ T5655] input: syz1 as /devices/virtual/input/input11 [ 7133.273640][ T5700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 7133.278813][ T5700] IPv6: NLM_F_CREATE should be set when creating new route [ 7133.281284][ T5700] IPv6: NLM_F_CREATE should be set when creating new route [ 7134.982660][ T5700] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.693'. [ 7172.815605][ T5713] netlink: 52 bytes leftover after parsing attributes in process `syz.1.697'. [ 7206.599917][ T5719] ptrace attach of "/syz-executor exec"[3216] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 7240.142036][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'. [ 7401.880282][ T5492] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 7401.917181][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 7402.193188][ T5492] usb 2-1: device descriptor read/64, error -32 [ 7402.598157][ T5492] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 7408.643654][ T5492] usb 2-1: unable to get BOS descriptor or descriptor too short [ 7409.059764][ T5492] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 7409.863928][ T5492] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 7409.882126][ T5492] usb 2-1: chopping to 0 config(s) [ 7409.897528][ T5492] usb 2-1: can't read configurations, error -32 [ 7410.080704][ T5492] usb usb2-port1: attempt power cycle [ 7410.783885][ T5492] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 7410.894511][ T5492] usb 2-1: device descriptor read/8, error -32 [ 7411.473050][ T5492] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 7411.559182][ T5492] usb 2-1: device descriptor read/8, error -32 [ 7411.732414][ T5492] usb usb2-port1: unable to enumerate USB device [ 8054.278041][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 8205.417053][ T5950] syz.0.785 uses obsolete (PF_INET,SOCK_PACKET) [ 8268.496484][ T5966] netlink: 'syz.1.790': attribute type 9 has an invalid length. [ 8388.504132][ T6005] sch_tbf: burst 1347 is lower than device lo mtu (65550) ! [ 8462.081884][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 8462.093435][ T6055] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 8462.149086][ T6055] netlink: 44 bytes leftover after parsing attributes in process `syz.1.826'. [ 8462.199555][ T6055] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 8491.159428][ T5647] hid-generic 0040:0010:7FFFFFFF.0001: item fetching failed at offset 0/2 [ 8491.190696][ T5647] hid-generic 0040:0010:7FFFFFFF.0001: probe with driver hid-generic failed with error -22 [ 8632.892617][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 8633.372807][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 8633.441108][ T6173] hsr_slave_0: left promiscuous mode [ 8633.513233][ T6173] hsr_slave_1: left promiscuous mode [ 8646.016789][ T6187] netlink: 104 bytes leftover after parsing attributes in process `syz.0.883'. [ 8675.949667][ T6199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.889'. [ 8679.838837][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 8679.852444][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 8687.153079][ T6209] input: syz0 as /devices/virtual/input/input12 [ 8721.349269][ T6240] dummy0: mtu less than device minimum [ 8820.803147][ T6301] capability: warning: `syz.1.932' uses 32-bit capabilities (legacy support in use) [ 8878.954149][ T6323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 8883.032768][ T6327] tap0: tun_chr_ioctl cmd 1074025678 [ 8883.091859][ T6327] tap0: group set to 0 [ 8955.489227][ T6360] lo: entered allmulticast mode [ 8956.261967][ T6360] lo: left allmulticast mode [ 8996.840608][ T6375] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.871631][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.879996][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.886654][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.891155][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.896571][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.900916][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.906332][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.910632][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 8997.915706][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.009118][ T6374] net_ratelimit: 695 callbacks suppressed [ 9002.009846][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.018356][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.023520][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.032273][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.041470][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.047338][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.051846][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.059245][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.066510][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9002.072492][ T6374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 9242.506901][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.993'. [ 9512.380379][ T6542] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 9619.448463][ T6588] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 9619.479552][ T6588] pim6reg0: owner set to 0 [ 9713.137062][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 9792.100243][ T6644] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1065'. [ 9799.644194][ T6646] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 9863.701567][ T30] audit: type=1400 audit(10119.448:6): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=6669 comm="syz.1.1076" name="p" offset=92 [ 9896.637224][ T6679] ªªªªªª: renamed from vlan0 (while UP) [ 9972.952776][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 9997.324066][ T6721] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [10041.410650][ T6744] macvlan2: entered promiscuous mode [10041.629772][ T6744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [10114.563663][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [10114.576089][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [10280.057010][ T6102] usb 2-1: new high-speed USB device number 6 using dummy_hcd [10280.633046][ T6102] usb 2-1: Using ep0 maxpacket: 32 [10280.726982][ T6102] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [10280.982718][ T6102] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10280.989673][ T6102] usb 2-1: config 0 interface 0 has no altsetting 0 [10280.991719][ T6102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10281.281328][ T6102] usb 2-1: config 0 descriptor?? [10290.662976][ T6102] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [10290.710073][ T6102] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [10290.723222][ T6102] uclogic 0003:5543:0522.0002: unexpected long global item [10290.846573][ T6102] uclogic 0003:5543:0522.0002: parse failed [10290.850767][ T6102] uclogic 0003:5543:0522.0002: probe with driver uclogic failed with error -22 [10291.653864][ T6102] usb 2-1: USB disconnect, device number 6 [10558.036358][ T7030] binder: BC_ATTEMPT_ACQUIRE not supported [10558.051507][ T7030] binder: 7028:7030 ioctl c0306201 2000000001c0 returned -22 [10564.432536][ T7034] netlink: 'syz.0.1216': attribute type 12 has an invalid length. [10575.391854][ T7038] vlan0: entered promiscuous mode [10633.053339][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [10633.078389][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [10653.151796][ T6597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [10653.600100][ T6597] usb 1-1: Using ep0 maxpacket: 16 [10654.155592][ T6597] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [10654.477051][ T6597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [10654.491980][ T6597] usb 1-1: config 0 has no interfaces? [10655.599910][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10655.610900][ T6597] usb 1-1: Product: syz [10655.628114][ T6597] usb 1-1: Manufacturer: syz [10655.638136][ T6597] usb 1-1: SerialNumber: syz [10656.937434][ T6597] usb 1-1: config 0 descriptor?? [10669.491148][ T6597] usb 1-1: USB disconnect, device number 2 [10742.784467][ T30] audit: type=1326 audit(10998.518:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffad9341ba code=0x7ffc0000 [10742.850005][ T30] audit: type=1326 audit(10998.588:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffad9341ba code=0x7ffc0000 [10745.003224][ T30] audit: type=1326 audit(11000.728:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0x7fffad9341ba code=0x7ffc0000 [10745.688281][ T30] audit: type=1326 audit(11001.428:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.0.1243" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffad9341ba code=0x0 [10814.302711][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1252'. [10821.209724][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [10916.351548][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [11095.770179][ T7220] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [11095.773135][ T7220] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7220, name: syz.1.1285 [11095.777172][ T7220] preempt_count: 10000, expected: 0 [11095.778819][ T7220] RCU nest depth: 0, expected: 0 [11095.780434][ T7220] locks held by syz.1.1285/7220: 0, last CPU#0 [11095.782234][ T7220] Preemption disabled at: [11095.782819][ T7220] [] preempt_schedule_irq+0x5e/0x1c4 [11095.789770][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.1.1285 Tainted: G L syzkaller #0 PREEMPT [11095.790642][ T7220] Tainted: [L]=SOFTLOCKUP [11095.790890][ T7220] Hardware name: riscv-virtio,qemu (DT) [11095.791511][ T7220] Call Trace: [11095.791986][ T7220] [] dump_backtrace+0x2e/0x3c [11095.792855][ T7220] [] show_stack+0x30/0x3c [11095.793360][ T7220] [] dump_stack_lvl+0x114/0x1aa [11095.793839][ T7220] [] dump_stack+0x1c/0x24 [11095.794302][ T7220] [] __might_resched+0x556/0x5b2 [11095.795042][ T7220] [] __might_sleep+0x80/0xc4 [11095.795694][ T7220] [] __mutex_lock+0xe8/0x1924 [11095.796292][ T7220] [] mutex_lock_nested+0x14/0x1c [11095.796814][ T7220] [] posix_cpu_timer_wait_running+0xe8/0x346 [11095.797464][ T7220] [] posix_timer_delete+0x2a8/0x772 [11095.798007][ T7220] [] exit_itimers+0x1de/0x686 [11095.798530][ T7220] [] do_exit+0x434/0x297a [11095.799206][ T7220] [] do_group_exit+0xca/0x258 [11095.799882][ T7220] [] __riscv_sys_exit_group+0x48/0x52 [11095.800604][ T7220] [] syscall_handler+0x92/0x114 [11095.801235][ T7220] [] do_trap_ecall_u+0x4ca/0x658 [11095.801929][ T7220] [] handle_exception+0x168/0x174